Which statement best describes FERPA's general rule about disclosing education records to researchers?

Which statement best describes FERPA's general rule about disclosing education records to researchers?

• A. Consent is never required for any disclosure
• B. Records may be disclosed to researchers only with parental consent
• C. Disclosure to researchers is permitted only under specific FERPA exceptions, such as legitimate educational interests
• D. Records are always public

Answer: (C)

Understanding this question starts with how FERPA treats education records: they’re confidential, and releases aren’t automatic. When a school wants to share records with researchers, it must fit one of the specific FERPA exceptions or obtain consent. In practice, disclosures to researchers are allowed only under these defined safeguards—such as providing access to individuals with legitimate educational interests within the institution or, for external researchers, using a written agreement that ensures confidentiality and limits data use (often with de-identified data or minimal necessary information). That means the general rule is that disclosure to researchers is permitted only under those specific FERPA exceptions and protections. The other statements misstate how FERPA works: consent isn’t always required (and not all disclosures are allowed without it), and records aren’t public.

Understanding this question starts with how FERPA treats education records: they’re confidential, and releases aren’t automatic. When a school wants to share records with researchers, it must fit one of the specific FERPA exceptions or obtain consent. In practice, disclosures to researchers are allowed only under these defined safeguards—such as providing access to individuals with legitimate educational interests within the institution or, for external researchers, using a written agreement that ensures confidentiality and limits data use (often with de-identified data or minimal necessary information). That means the general rule is that disclosure to researchers is permitted only under those specific FERPA exceptions and protections. The other statements misstate how FERPA works: consent isn’t always required (and not all disclosures are allowed without it), and records aren’t public.